Skip to content

guardyn/guardyn

Guardyn Logo

Guardyn

Private messaging that just works 🔐

Open source • End-to-end encrypted • Self-hostable

📱 Download💻 Self-HostWhy Guardyn?Contribute

Version E2EE PQ-Ready License


What is Guardyn?

Guardyn is a private messaging app with military-grade encryption. Unlike other messengers:

  • Always encrypted — your messages can't be read by anyone, not even us
  • Open source — you can verify everything we claim
  • Self-hostable — run your own server if you want complete control
  • Post-quantum ready — protected against future quantum computer attacks

Guardyn Apps


📱 Quick Start (Users)

Download the App

Platform Status Download
📱 Android ✅ Ready Coming to Play Store Q1 2026
📱 iOS ✅ Ready Coming to App Store Q1 2026
🖥️ Windows ✅ Ready GitHub Releases
🖥️ macOS ✅ Ready GitHub Releases
🖥️ Linux ✅ Ready GitHub Releases

Early Access: We're in beta! Download from GitHub Releases and join the privacy rebellion.

Connect to a Server

Option 1: Use our hosted server (coming Q2 2026)

  • Just download the app and sign up — we handle everything

Option 2: Self-host your own server


💻 Quick Start (Developers)

Want to run your own Guardyn server? It's easy!

Prerequisites

Start in 30 Seconds

# Clone the repository
git clone https://github.com/guardyn/guardyn.git
cd guardyn

# Start all services
docker compose -f docker-compose.dev.yml up -d

# Check status
docker compose -f docker-compose.dev.yml ps

That's it! 🎉 Your server is running at localhost:8080.

Using Justfile (Even Easier)

We provide a Justfile with all common commands:

# Install Just: cargo install just (or brew install just)

just dc-up      # Start all services
just dc-down    # Stop all services  
just dc-logs    # View logs
just dc-ps      # Check status
just dc-reset   # Reset all data

Next Steps

Guide Description
Developer Quick Start Full development setup
Docker Dev Guide Docker Compose details
Production Deployment Kubernetes for production
Contributing How to contribute

🔒 Why Guardyn?

The Problem

App E2EE Always? Open Source? Self-Host? Problem
Telegram Chats readable by servers
WhatsApp Metadata goes to Meta
Slack/Teams No E2EE, enterprise only
Signal ✅* Can't self-host
Guardyn

*Signal's server is mostly open source but not designed for self-hosting.

Our Solution

For Everyone:

  • 🔐 Messages encrypted before they leave your device
  • 👁️ Zero-knowledge: we can't read your messages
  • 📱 Native apps for all platforms

For Organizations:

  • 🏢 Self-host for complete data sovereignty
  • 🔑 LDAP/SAML integration (coming v1.2)
  • 📊 Compliance-ready (GDPR, HIPAA)

For Developers:

  • 🛠️ 100% open source (Apache-2.0)
  • ⚡ 30-second local setup
  • 📚 Comprehensive documentation

🛡️ Security

What We Use

Layer Technology Why
1-on-1 Chat Signal Protocol (Double Ratchet) Battle-tested, billions of users
Group Chat OpenMLS (IETF RFC 9420) Modern standard, scalable
Key Exchange PQXDH (X3DH + ML-KEM) Post-quantum resistant
Voice/Video WebRTC + SFrame E2EE media streaming
Metadata Sealed Sender Hides who sent the message

What We Promise

  • End-to-end encryption — Always on, can't be disabled
  • Perfect Forward Secrecy — Past messages safe if keys compromised
  • Post-Quantum Ready — Protected against quantum computers
  • Metadata Protection — Sealed Sender hides sender identity
  • Hardware Keys — iOS Secure Enclave, Android KeyStore

What We Don't Promise

  • ⚠️ If your device is compromised, encryption can't help
  • ⚠️ Recipients can take screenshots
  • ⚠️ ISPs see IP addresses (use Tor/VPN for anonymity)

Security Audit

  • ✅ Internal security review completed
  • ✅ Penetration testing infrastructure deployed
  • 📋 External audit (Cure53) scheduled Q2 2026

📱 Features

Messaging

  • ✅ 1-on-1 and group chat (E2EE)
  • ✅ Voice messages
  • ✅ Message reactions, replies, edit, delete
  • ✅ Disappearing messages
  • ✅ Read receipts and typing indicators

Calls

  • ✅ Voice and video calls (1-on-1, E2EE)
  • ✅ Screen sharing (desktop)
  • 📋 Group calls (coming v1.1)

Media

  • ✅ Photos, videos, files (encrypted)
  • ✅ Media gallery

Platform

  • ✅ iOS, Android (Flutter)
  • ✅ Windows, macOS, Linux (Tauri)
  • ✅ Push notifications (FCM, APNs)
  • ✅ Offline support

🏗️ Architecture

┌────────────────────────────────────────────────────────────────┐
│                         YOUR DEVICES                            │
├────────────────────────────────────────────────────────────────┤
│  📱 Mobile (Flutter)          🖥️ Desktop (Tauri)               │
│  iOS • Android                Windows • macOS • Linux           │
└──────────────────────────┬─────────────────────────────────────┘
                           │
                    🔐 guardyn-crypto (Rust)
                    All encryption happens HERE
                    on YOUR device
                           │
                           ▼
┌────────────────────────────────────────────────────────────────┐
│                       GUARDYN SERVER                            │
│  (Can self-host or use our cloud)                               │
├────────────────────────────────────────────────────────────────┤
│  🔑 Auth        💬 Messaging      👥 Presence                   │
│  📁 Media       📞 Calls          🔔 Notifications              │
├────────────────────────────────────────────────────────────────┤
│  TiKV • ScyllaDB • Redpanda (Data Layer)                       │
└────────────────────────────────────────────────────────────────┘
                           │
                    Server CANNOT read
                    your messages! 🔒

Key Point: All encryption/decryption happens on YOUR device. The server only sees encrypted blobs.


🗺️ Roadmap

✅ Completed (v1.0.1 — January 2026)

  • All backend services (Auth, Messaging, Presence, Media, Call, Notifications)
  • Full cryptography stack (PQXDH, Double Ratchet, OpenMLS, SFrame)
  • Mobile apps (iOS, Android)
  • Desktop apps (Windows, macOS, Linux)
  • Voice/video calls (1-on-1)
  • Production infrastructure (Kubernetes, observability)
  • 57 technical debt items resolved (228 hours of work)

🚧 Q1-Q2 2026

  • External security audit (Cure53)
  • App Store / Play Store submission
  • Public beta launch
  • Group calls (LiveKit SFU)

📋 Q2-Q3 2026

  • Managed cloud hosting (SaaS)
  • Enterprise features (LDAP, SAML)
  • v1.0 general availability

🆚 Compared to Signal

We respect Signal — they pioneered secure messaging. Here's how we differ:

Feature Signal Guardyn
1-on-1 E2EE ✅ Double Ratchet ✅ Double Ratchet (same)
Group E2EE ✅ Sender Keys ✅ OpenMLS (newer standard)
Post-Quantum 🚧 In development ✅ PQXDH implemented
Self-Hosting ✅ Full support
100% Open Source ⚠️ Most parts ✅ Everything
Track Record ✅ 10+ years ⚠️ New (2026)
Audit Status ✅ Multiple audits 📋 Planned Q2 2026

Bottom Line:

  • Use Signal if you want maximum proven trust
  • Use Guardyn if you need self-hosting or want 100% open source

📖 License

100% Apache-2.0. No dual licensing, no "Enterprise Edition" tricks.

Self-host anywhere. Modify freely. Contribute back if you want.


🤝 Contributing

We need your help! See CONTRIBUTING.md for:

  • ⚡ 5-minute quick start
  • 🎯 Good first issues
  • 🛠️ Development workflow
  • 💡 Ways to contribute (code, docs, testing, spreading the word)

💬 Contact


The Privacy Rebellion Starts Now 🛡️

Built with ❤️ by privacy advocates
Apache-2.0 • Copyright © 2025-2026 Guardyn Team

About

Privacy-focused secure messenger with post-quantum E2EE (PQXDH/ML-KEM), OpenMLS groups, SFrame voice/video, Sealed Sender. Flutter (iOS/Android) + Tauri (Desktop). Self-hostable, Kubernetes-native, Apache-2.0.

Topics

Resources

License

Code of conduct

Contributing

Security policy

Stars

Watchers

Forks

Sponsor this project

Packages

 
 
 

Contributors